Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/508186d4-21a8-3290-bf68-88a44d5ec26d.roa
File:                     508186d4-21a8-3290-bf68-88a44d5ec26d.roa (raw, json)
Hash identifier:          Icjihhgh7fjJ/gKDnKeGV1dvSZ4G0orIjXCnMC85ZH4=
Subject key identifier:   71:C3:36:39:E8:29:DF:17:1D:C8:C0:9B:C8:66:11:53:BA:C2:CD:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584B60BF8CB84DFEF6FA84E94A80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/508186d4-21a8-3290-bf68-88a44d5ec26d.roa
Signing time:             Wed 01 Oct 2025 14:11:15 +0000
ROA not before:           Wed 01 Oct 2025 14:11:15 +0000
ROA not after:            Tue 30 Dec 2025 15:11:15 +0000
asID:                     6167
IP address blocks:        97.241.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 12 Oct 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:60:bf:8c:b8:4d:fe:f6:fa:84:e9:4a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Oct  1 14:11:15 2025 GMT
            Not After : Dec 30 15:11:15 2025 GMT
        Subject: CN=3ed20e55-59b0-4061-97e7-ab47619ec6c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2b:2b:89:45:13:33:34:e4:b4:c1:61:7a:1e:
                    65:fc:b0:0b:85:fb:dd:dc:21:13:a4:76:b3:11:f4:
                    17:1a:a9:cb:86:f0:38:75:93:8c:10:ea:06:42:02:
                    a9:51:f0:80:02:4a:0d:7e:49:8e:16:ac:c6:0f:91:
                    3f:fd:c8:60:d0:ed:e7:58:d1:96:1a:db:34:26:cf:
                    be:9c:8b:1c:1e:1d:27:d7:8a:1c:f3:d9:fb:d7:9c:
                    4a:bf:de:bb:5a:81:49:45:0f:8b:97:cf:ee:8f:df:
                    35:67:4c:95:5f:d9:7d:33:0d:b4:47:66:b9:b8:02:
                    30:3d:5f:34:e8:fb:0f:a0:79:eb:1c:54:26:c5:77:
                    77:f9:a5:09:88:28:88:ff:8d:22:f5:d4:86:c1:11:
                    de:68:90:9e:3f:75:4c:a0:5c:da:92:11:26:94:90:
                    18:2f:e4:0e:1b:92:f8:96:62:27:b2:23:db:17:a8:
                    07:74:8c:ff:3a:f5:75:70:f0:9d:6a:c2:be:7c:53:
                    d4:56:f9:38:6d:af:c0:d9:fd:52:de:33:89:6f:03:
                    30:2f:b9:b2:ef:a7:7b:d6:6b:96:dc:d1:7c:87:5a:
                    1e:e9:20:57:ba:bd:b8:08:16:29:bf:87:3f:f6:3d:
                    22:33:9d:48:18:34:cf:86:d6:b8:f0:74:ce:ec:6f:
                    8c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:C3:36:39:E8:29:DF:17:1D:C8:C0:9B:C8:66:11:53:BA:C2:CD:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/508186d4-21a8-3290-bf68-88a44d5ec26d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.241.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:1f:59:7e:52:24:92:5b:6b:b0:9c:16:34:6d:83:95:1a:bb:
         52:d4:d3:1d:f4:d9:de:bb:51:11:45:5b:f9:a3:bc:e9:6f:71:
         48:c7:bf:1a:b9:87:ec:f5:fa:29:50:2e:98:89:c6:b5:bf:a0:
         66:25:19:f2:d6:7b:5a:f3:42:ef:18:27:f8:4c:5d:26:56:b0:
         e6:96:8d:ad:76:17:8f:fd:70:15:e6:1c:17:d7:89:4b:8d:dd:
         51:5a:d1:14:d3:b1:e1:2b:f7:c0:e5:67:f3:83:41:f2:64:7c:
         4f:c5:2b:1f:c2:d9:f3:73:37:af:80:64:28:16:8a:c5:3a:99:
         65:3c:e2:cb:6e:7b:65:c3:7c:03:12:9a:61:c7:41:83:39:74:
         14:7f:46:28:86:38:01:3e:d0:9c:ad:58:63:d6:33:54:cc:6c:
         25:c4:b0:05:bf:53:4a:36:a6:2a:3a:dd:31:ad:0f:49:37:6c:
         d1:f8:18:a2:a3:ae:f7:f7:fe:4c:18:6a:d3:e3:60:b8:7b:14:
         08:c8:14:94:17:5b:02:cc:bf:bb:91:86:ed:8c:b0:0d:c4:13:
         9a:24:e2:08:c0:4e:95:78:76:0e:31:1f:8c:81:03:6e:e3:f3:
         ff:74:f6:b5:35:b8:1a:89:bc:57:35:b2:a3:42:50:c5:f5:b4:
         7a:84:aa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 17:47:29 2025 by rpki-client